Service providers and PII

The request was successful.

Dear Brighton and Hove City Council,

1. Do you use an external IT service provider/Managed Service Provider (MSP)?
- Yes
- No

2. Does your provider/MSP serve as a processor of your Personally Identifiable Information (PII)?
- Yes
- No

If No, thank you for your time.
If Yes, please see below:

3. Does your contract/Service Level Agreement (SLA) with the provider(s) have clear provisions for the allocation of responsibilities in the event of a data breach?
- Yes
- No

4. Have you revisited your original contract(s) to ensure compliance with the General Data Protection Regulation (GDPR)?
- Yes
- No

5. Does the contract/SLA define the time frame in which a security breach at the provider must be reported to you?
- Yes
- No

6. Do you have policies in place for privileged account management?
- Yes
- No

7. Has your service provider/MSP suffered a data breach involving your organisation’s PII in the last 12 months?
- Yes
- No

8. If yes, how long did it take for them to notify you?
- <30 minutes
- 31 mins – 1 day
- 1 – 2 days
- 2 – 3 days
- More than 3 days

Thank you for your time.

Yours faithfully,

Gabby Dunne

Freedom Of Information, Brighton and Hove City Council

1 Attachment

Thank you for your email. This is an automated email acknowledgement from
the Information Governance Team at Brighton & Hove City Council.

 

When we will deal with your email

 

This mailbox is monitored during the working hours of 8:00am to 4:00pm on
Monday to Friday (excluding Bank Holidays). Emails received outside of
these working hours will usually be processed during the next available
working day. We aim to deal with all emails within two working days of
receipt.

 

How we process a new Freedom of Information (FOI) Request

 

When you submit a new FOI Request we will do the following;

 

·         We will log your FOI request and send confirmation of this to
you by email, together with a FOI request reference number. We aim to do
this within two working days of receiving your request.

 

·         Please note that future email correspondence regarding your FOI
request will then be sent to you from
[1][email address]

 

·         We will allocate your FOI request to the appropriate Council
team(s) in order for them to collate the information you have requested.

 

·         Once we have received an approved response back from the
relevant Council team(s), we will send this to you.

o   Please note that the response to your FOI request will be sent to you
in letter form, as an email attachment.

o   An anonymized version of the response to your FOI request may be
published on the Council’s [2]Disclosure Log.

 

When you can expect to receive a response to your FOI request

 

Under the Freedom of Information Act 2000 the Council has a legal
obligation to respond to your request no later than 20 working days
following the date of receipt. Wherever possible, a response to your FOI
request will be sent to you before the legal deadline of 20 working days.

 

Further Information

 

You can find more information about the FOI process on the Council website
through the following link;

 

[3]Freedom of Information – Brighton & Hove City Council  

 

Making a Freedom of Information (FOI) request using the Council’s online
FOI request form

 

You can now make new FOI requests using the Council’s online FOI request
form. The online FOI request form is available through the following link
and on the Council website;

 

[4]Online FOI request form

 

 

Thank you,

 

Information Governance Team | 01273 295959 | [5]Brighton & Hove City
Council

Notice to recipient:
The information contained in this electronic mail message is intended only
for the use of the individual to whom it is addressed
and may contain information which is privileged and confidential, the
disclosure of which is prohibited by law.
If the reader of this message is not the intended recipient, please note
that any dissemination, distribution or copying of this
communication is strictly prohibited. If you have received this
communication in error please notify the sender immediately.
Thank you in anticipation of your co-operation.

You can visit our website at [6]http://www.brighton-hove.gov.uk

Please consider the environment, only print out this email if absolutely
necessary.

Please Note:  Both incoming and outgoing Emails may be monitored and/or
recorded in line with current legislation

 

References

Visible links
1. mailto:[email address]
2. http://www.brighton-hove.gov.uk/content/...
3. http://www.brighton-hove.gov.uk/content/...
4. http://www.brighton-hove.gov.uk/content/...
5. http://www.brighton-hove.gov.uk/
6. http://www.brighton-hove.gov.uk/

 
 
 
 
 
Freedom of Information request
Our reference: 1615533
Your reference: [FOI #496917 email]

show quoted sections

 
 
 
 
 
Freedom of Information request
Our reference: 1615533
Your reference: [FOI #496917 email]

show quoted sections

Dear Brighton and Hove City Council,

By managed service provider I mean a company that remotely manages your IT infrastructure and/or end-user systems.

Yours sincerely,

Gabby Dunne

1 Attachment

 
 
 
 
 
Freedom of Information request
Our reference: 1615533
Your reference: [FOI #496917 email]

show quoted sections